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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (currently amended): A system for the secure exchange of [[date]] data 
between a sender device and a receiver device over the public-switched telephone 
network (PSTN), comprising^ 

a sender device configured for connection to the public-switched telephone 
network (PSTN): 

a receiver device configured for connection to the PSTN; 

a telephony switch configured for operation on the PSTN for routing calls 
between a sender and receiver: 

a telephone server configured for controlling said telephony switch and for 
securing the exchange of data between said sender device and said receiver device: 

[[a]] said sender device , at a first interface, configured to encrypt selected data 
for communication to a receiver device, and th e s e nd e r d e v i c e a l so conf i gur e d to initiate 
a telephone call to said telephony server, known to said sender device, within a first 
transmission across a communications link through the telephony switch operating on 

the pstn rr.n : 

[[a]] said telephony server li nk e d coupled to [[the]] said sender device by the 
communications link for, 

th e s e rv e r conf i gur e d to r e c ei v e receiving a transmission initiated by [[the]] 

said sender device, 

to v e r i fy verifying the authenticity of [[the]] said sender device, 

to i n i t i at e initiating an authentication a s e cond transmission to [[the]] said 

receiver device, [[and]] 
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to v e r i fy verifying the authenticity of [[the]] said receiver device, 
establishing a connection over the PSTN through said telephone switch 

from said sender device, which has been authenticated, to said receiver device 

which has also been authenticated, and 

creating a record for billing of communications service performed over the 

PSTN by said system; 

wherein said telephony [[the]] server furth e r is configured to permit li nkag e 
coupling of said [[the]] sender device and said [[the]] receiver device for communication 
of [[the]] said encrypted selected data without routing through [[the]] said telephony 
server following v e r i f i cat i on of auth e nt i c i ty authentication of both [[the]] said sender 
device and [[the]] said receiver device[[,]] ; 

wherein said sender device is configured for initiating a second transmission over 
the communication link established by said telephony server with said receiver device; 

[[the]] wherein said receiver device , at a second interface, is configured to 
respond to the second transmission from [[the]] said sender device s e rv e r and to 
decrypt receive the selected encrypted data received from [[the]] said sender device 
over said PSTN furth e r conf i gur e d to d e crypt th e s ele ct e d data ; 

wherein said system is configured for securely exchanging data over the PSTN 
as a single call connection from the sender device through the PSTN in response to 
authentication of both said sender device and said receiver device . 

2. (currently amended): A method of securely exchanging data between a 
sender modem and a receiver modem over a public-switched telephone network 
(PSTN), comprising th e st e ps of : 

selecting data to be transmitted as selected data from [[the]] a sender modem to 
[[the]] a receiver modem over a public-switched telephone network (PSTN) [[,11 ; 

encrypting the selected data within an enciphering unit associated with said 
sender modem [[,]] ; 
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initiating a first transmission of sender authentication and receiver identification 
information to a trusted service provider on said PSTN and configured for controlling a 
telephony switch for routing telephone calls within said PSTN [[,]] ; 

[[the]] said first transmission containing encrypted data sufficient to v e r i fy th e 
auth e nt i c i ty of authenticate the sender modem and [[the]] identity of the receiver 
modem [[,]] ; 

verifying authenticity of said sender modem by said trusted service provider on 
said PSTN , in response to [[the]] said first transmission , th e auth e nt i c i ty of th e s e nd e r, ; 

initiating from [[the]] said trusted service provider, upon verification of the 
authenticity of the sender modem , a s e cond an authentication transmission to connect 
with said to and v e r i fy th e auth e nt i c i ty of th e receiver modem as identified within said 
first transmission of said sender modem [[,]] ; 

verifying the authenticity of [[the]] said receiver modem [[,]] ; 

transferring the connection over the PSTN from said li nk i ng th e sender and th e 
modem to said receiver modem for direct delivery of a second transmission from said 
sender modem containing [[the]] said selected data; 

exchanging of encryption keys within a handshaking process between said 
sender modem and said receiver modem; 

wherein said second transmission is communicated over said PSTN from said 
sender modem to said receiver modem; and 

creating a record for billing of communications service performed over the PSTN 
by said system. 

3. (currently amended): Apparatus for fac ili tat i ng th e s e cur e d e xchang e of An 
apparatus for securely exchanging selected data over a public switched telephone 
network (PSTN), i nc l ud i ng comprising: 

a telephony server configured for controlling a telephony switch adapted for 
routing telephone calls through the PSTN from a sender to a receiver; 
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said telephony server configured for, 

receiving encrypted sender authentication and receiver identification 
information from a sender making a call to said telephony server, 

decrypting sender authentication and receiver identification information, 

authenticating the sender, 

connecting said telephony server through the telephony switch to a 
recipient identified in said encrypted receiver identification information, 
authenticating the recipient, 

transferring the connection from the sender to the recipient to allow the 
sender and the recipient to exchange selected data which has been encrypted 
for transfer over the PSTN through said telephony switch; and 
a recording mechanism configured for creating a record for billing of 

communications services performed over the PSTN by said apparatus in securely 

connecting sender and receiver. 

a pa i r of i nt e rfac e s capab le of transm i tt i ng and r e c ei v i ng, v i a th e pub li c sw i tch e d 

t ele phon e n e twork, data from at le ast two s e cur e d data e xchang e d e v i c e s, 

an e nc i ph e r/d e c i ph e r un i t capab le of d e crypt i ng an i d e nt i ty i d e nt i f ie r r e c ei v e d 

from on e of sa i d data e xchang e d e v i c e s wh i ch corr e sponds to th e oth e r of sa i d data 

e xchang e d e v i c e s, 

a contro l un i t capab le of or i g i nat i ng a data conn e ct i on to on e of sa i d data 

e xchang e d e v i c e s v i a on e of sa i d i nt e rfac e s to sa i d pub li c sw i tch e d t ele phon e n e twork. 
(d) a sw i tch capab le of conn e ct i ng sa i d i nt e rfac e s and li nk i ng conn e ct i ons to sa i d 

data e xchang e d e v i c e s. 

4. (currently amended): [[The]] A system as recited in [[of]] claim 1, wherein in 
response to said server establishing a connection over the public switched telephone 
network (PSTN) from said sender device to said receiver device, said sender device 
and said receiver device perform a handshaking process and then communicate 
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encrypted data from sender to receiver, and/or from receiver to sender i n wh i ch th e 
commun i cat i ons li nk i s a pub li c sw i tch e d t ele phon e n e twork . 

5. (currently amended): [[The]] A system as recited in [[of]] claim 1 , wherein said 
recipient identification information comprises the account number of said recipient as 
known by said telephony server i n wh i ch th e commun i cat i ons li nk i s a pr i vat e branch 
e xchang e. 

6. (currently amended): [[The]] A system as recited in [[of]] claim 1 , wherein said 
telephony server is disconnected from the call in response to said telephony server 
establishing said communication link between said sender device and said receiver 
device i n wh i ch th e commun i cat i ons li nk i s a w i d e ar e a n e twork . 

7. (currently amended): [[The]] A system as recited in [[of]] claim 1 , wherein said 
record for billing of communications service performed over the public switched 
telephone network (PSTN) by said system is configured for billing users on a per-call 
and/or per-minute basis for use of services provided by furth e r i nc l ud i ng a b illi ng syst e m 
for r e cord i ng usag e of said system. 

8. (currently amended): [[The]] A system as recited in [[of]] claim [[7]] 1, wherein 
said record for billing of communications service syst e m i s conn e ct e d to sa i d pub li c 
sw i tch e d n e twork (PSTN) and is configured for submitting to subm i t charges to appear 
on a telephone bill of a user of said system. 

9. (currently amended): [[The]] A system as recited in [[of]] claim [[6]] 1^ wherein 
said record for billing of communications service is configured for obtaining syst e m i s 
conn e ct e d to obta i ns payment from said user by an electronic payment mechanism. 
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10. (currently amended): [[The]] A system as recited in [[of]] claim 1; 
wherein the system protects the anonymity of both the sender device and the 

receiver device; 

wherein anonymity of said sender device is achieved in response to said system 
establishing a telephone call from said sender device to said telephony server, and not 
directly to said receiver device; and 

wherein the anonymity of said receiver device is achieved in response to routing 
the call over the public switched telephone network (PSTN), from said sender device to 
said receiver device, without communicating the telephone number of the receiver over 
the PSTN . 

1 1 . (currently amended): [[The]] A system as recited in [[of]] claim 1 , wherein 
said sender device and said receiver device comprise secure modem devices (SMD) 
configured for following a cryptographic protocol in cooperation with said telephony 
server furth e r i nc l ud i ng an aud i t i ng syst e m for r e cord i ng usag e of sa i d syst e m and for 
r e cord i ng op e rat i ona l e rrors . 

12. (currently amended): [[The]] A system as recited in [[of]] claim 1 , wherein 
one configuration of said sender device limits it to calling out only to said telephony 
server furth e r i nc l ud i ng at le ast two mod e ms, e ach commun i cat i ng w i th on e of sa i d two 
i nt e rfac e s . 



13. (currently amended): [[The]] A system as recited in [[of]] claim [[18]] 1_: 
wherein said sender device and said receiver device, at said first and second 
interfaces, comprise digital modems: 
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wherein at least one telephony switch is coupled between the modems coupled 
at said first interface and said second interface; and 

wherein said telephony switch and said modems are digital, and said telephony 
[[the]] switch connects digital outputs of said modems. 

14. (currently amended): [[The]] A system as recited in [[of]] claim 1 A wherein at 
least one of said interfaces [[is]] comprises a T1 , ISDN or ADSL, telephone connection. 

1 5. (new): A system as recited in claim 1 , wherein a valid account on said 
telephony server must be established by said sender device as a condition for 
verification of authenticity. 

16. (new): A system as recited in claim 1, further comprising: 

a computer coupled to said sender device for selecting data information, and for 
selecting a recipient for said selected data to be sent to; and 

a computer coupled to said receiver device for controlling the receipt of selected 
data from said sender device. 

17. (new): A system as recited in claim 1 , wherein said record for billing is 
provided to a local exchange carrier, or local telephone service provider, which 
incorporates the billing into a conventional phone bill for payment by a customer. 

18. (new): A system as recited in claim 1, further comprising an operator 
interface configured to allow a sender to select the data which is to be transferred, and 
for selecting a recipient of that data. 
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19. (new): A system as recited in claim 1 , wherein said first transmission is 
executed in response to aggregation, compression and encryption of data selected by a 
sender for said sending device, and the selection of an authorized recipient. 

20. (new): A system as recited in claim 1 , further comprising said telephony 
server caching said encrypted selected data from said sender device for forwarding to 
the receiver device at a later time. 
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